VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Instrukcja Użytkownika Pobierz pdf (Strona 17)

TECHNICAL WHITE PAPER / 17

UNIX/Linux or Mac OS X

Each UNIX/Linux or Mac OS X installation package is targeted for one or more supported platforms. To install the

UNIX/Linux or Mac OS X Agent using a provisioning system, extract the installation package as appropriate and then

deploy the extracted file with the provisioning system. The Enterprise Certificate is embedded in the installation

package. For more information about UNIX/Linux or Mac OS X Agent installation, refer to the VMware vCenter

Configuration Manager Installation and Getting Started Guide.

Certificate Expiration

If any certificate expires (the valid-before date passes without renewing or replacing the certificate), then it cannot be

used to establish a TLS session. To verify the expiration dates of your certificates, consult the Certificates grid in

VCM (Administration | Certificates).

Certificate Transport

A certificate contains the public half of a key pair and identifying information, and an authenticating signature. Though

none of this information is ”secret”, the information should still be protected.

A certificate can be stored in a format that includes the private key. When this is the case, the data is secret and must

be safeguarded, stored, and transported securely.

Note The following information pertains to Windows platforms only. To import or export a certificate to UNIX, use

the CSI_ ManageCertificateStore utility provided with your VCM UNIX Agent installation package.

Exporting Certificates (Windows Only)

One way to export certificates is to use Microsoft® Management Console (MMC), as shown in the following

procedure.

Using MMC to Export Certificates

1. Open Microsoft Management Console (click Start | Run, and then enter MMC).

2. Click File | Add/Remove Snap-in.

3. Click Add, and then select Certificates from the Add Standalone Snap-in dialog box.

4. Click Add.

5. Select the computer account for the local machine for which the snap-in will manage certificates, and then click

Finish.

6. Click Close, and then click OK.

7. Navigate to the certificate store from which you want to export a certificate.

TLS Implementation for VCM

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 33 34

Brak uwag

VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Instrukcja Użytkownika Strona 17